Cyber Security Engineer

GovCIO; Hampton (VA); On-site; USD 180,000 - 200,000; Full time

Job summary

The engineer will work on continuous verification, ABAC enforcement, and ICAM modernization, while integrating SIEM/EDR/SOAR tools and maintaining system security documentation. Strong DoD guidelines familiarity is essential.

Qualifications

• Active TS/SCI clearance required.
• Experience in the AF Intelligence Community or IC missions.
• IAT III level certification or equivalent security credentials.
• Strong understanding of Zero Trust, frameworks, and DoD Zero Trust Strategy.
• Hands-on security operations, vulnerability management, or network security.
• Familiarity with NIST RMF, NIST SP 800-53, DoD Cloud SRG, and IC guidelines.
• Experience with security tools such as Splunk, ArcSight, Elastic, CrowdStrike, Tanium.

Responsibilities

• Engineer cybersecurity solutions aligned with Zero Trust architecture pillars: identity, devices, networks, applications/workloads, data, and analytics.
• Implement technical controls supporting continuous verification, micro-segmentation, and access enforcement.
• Support AF IC Zero Trust initiatives, including ICAM modernization, data tagging, and ABAC enforcement.
• Integrate security tools and platforms such as SIEM, EDR, SOAR, identity providers, and boundary security systems.
• Develop and maintain security documentation: system security plans, architecture diagrams, configuration standards, and POA&Ms.
• Participate in and support AF and IC accreditation activities following NIST SP 800-53, CNSSI standards, and DoD cybersecurity requirements.
• Conduct security assessments, risk analyses, vulnerability scans, and remediation activities.
• Collaborate with enterprise architects, cloud engineers, and mission partners to design secure workflows and secure data flows.
• Evaluate emerging Zero Trust technologies and recommend adoption strategies to enhance AF IC mission resilience.

Skills

TS/SCI

AF IC experience

IAT III

Security certifications

NIST RMF

Vulnerability management

SIEM tools

DoD guidelines

Tools

Splunk

ArcSight

Elastic

CrowdStrike

Tanium

Job description

GOV CIO is seeking a highly skilled Cybersecurity Engineer to design, implement, and sustain security capabilities that align with Zero Trust principles across AF IC mission systems. The Air Force Intelligence Community (AF IC) is advancing its enterprise cybersecurity posture through a comprehensive Zero Trust architecture. This role supports critical intelligence missions and requires strong collaboration with AF cyber, IT, and mission operations stakeholders. This position will be located at Joint Base San Antonio in San Antonio, TX and will be an onsite position.

Responsibilities

• Engineer cybersecurity solutions aligned with Zero Trust architecture pillars: identity, devices, networks, applications/workloads, data, and analytics.
• Implement technical controls supporting continuous verification, micro-segmentation, and access enforcement.
• Support AF IC Zero Trust initiatives, including ICAM modernization, data tagging, and attribute-based access control.
• Integrate security tools and platforms such as SIEM, EDR, SOAR, identity providers, and boundary security systems.
• Develop and maintain security documentation: system security plans, architecture diagrams, configuration standards, and POA&Ms.
• Participate in and support AF and IC accreditation activities following NIST SP 800-53, CNSSI standards, and DoD cybersecurity requirements.
• Conduct security assessments, risk analyses, vulnerability scans, and remediation activities.
• Collaborate with enterprise architects, cloud engineers, and mission partners to design secure workflows and secure data flows.
• Evaluate emerging Zero Trust technologies and recommend adoption strategies to enhance AF IC mission resilience.

Qualifications

High School with 10+ years (or commensurate experience)

Required Skills and Experience

• Clearance Required: TS/SCI
• Experience in the AF Intelligence Community, Air Force ISR, 16th Air Force, or other IC mission organizations
• IAT III Level Certification, CASP+/SecurityX, CCNP, CISA, CISSP, or CCSP
• Strong understanding of Zero Trust principles, frameworks, and DoD Zero Trust Strategy.
• Hands-on experience with security operations, vulnerability management, identity security, or network security.
• Familiarity with NIST RMF, NIST SP 800-53, DoD Cloud SRG, and IC security guidelines.
• Experience with security tools such as Splunk, ArcSight, Elastic, CrowdStrike, Tanium, or similar.

Preferred Skills and Experience

• Background in DevSecOps, automation, or IaC tools such as Terraform, Ansible, or Kubernetes.
• Experience engineering solutions involving data tagging, cross-domain systems, or ABAC enforcement.

#NSS

#DL

#TLM

Posted Salary Range

USD $180,000.00 - USD $200,000.00 /Yr.